Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4886a8268d8cb6de34247d7d4410bf4a238f672d.cer
File:                     4886a8268d8cb6de34247d7d4410bf4a238f672d.cer (raw, json)
Hash identifier:          V1QMUzEDkFMZKYRjD+swgNyjHuknRqn/+AwETqJi78s=
Subject key identifier:   FE:38:34:19:87:AA:7A:86:48:A3:B3:04:70:B8:B5:D0:73:23:50:01
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBD623
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/415cee0c-4b69-4430-9961-4b7eb819f372/4886a8268d8cb6de34247d7d4410bf4a238f672d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/415cee0c-4b69-4430-9961-4b7eb819f372/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Oct 2022 21:23:17 +0000
Certificate not after:    Sun 03 Nov 2024 20:43:59 +0000
Subordinate resources:    AS: 270151
                          IP: 190.102.32.0/22
                          IP: 2806:3e1::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16504355 (0xfbd623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  5 21:23:17 2022 GMT
            Not After : Nov  3 20:43:59 2024 GMT
        Subject: CN=4886a8268d8cb6de34247d7d4410bf4a238f672d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:b7:ae:4e:da:d9:ba:56:6a:5b:64:e8:f3:
                    16:bb:49:c1:60:8a:9f:bc:9d:a8:99:45:fc:68:ca:
                    72:68:ed:38:89:b8:5f:6a:0f:c7:be:d4:e7:21:a1:
                    12:3d:c1:a1:c0:be:a2:9c:68:93:35:cc:75:31:86:
                    21:02:88:a5:91:7f:64:5f:26:41:1d:79:34:cc:d2:
                    33:06:76:b8:15:1b:23:31:59:45:3c:8c:e7:05:83:
                    a6:1d:f4:ab:2d:ba:36:50:9c:3b:55:55:82:c5:74:
                    9c:ce:49:2e:29:ae:f6:fd:9f:98:00:84:4e:ee:58:
                    df:ec:b1:43:00:6b:24:2b:54:e1:aa:34:e0:0a:0a:
                    0f:f7:83:91:5e:d8:f0:b8:e7:ae:27:ff:2e:cf:09:
                    51:52:ec:1c:b8:57:52:b5:cd:5b:c6:87:7b:ca:12:
                    ea:95:ef:9e:c2:16:e4:61:d4:a6:ab:52:43:95:99:
                    dd:5e:13:70:65:51:4d:41:11:60:a6:d6:98:c6:fc:
                    41:ab:25:c8:44:80:c8:f6:68:cf:e3:73:fa:c8:5f:
                    76:8f:2d:e9:ef:72:fe:cc:4b:c7:e7:da:cc:e3:bc:
                    72:26:05:ac:07:e1:b8:31:26:ca:a5:a7:0f:d2:fe:
                    77:c7:c2:e3:0d:48:2a:7e:86:e6:fe:b3:9b:a7:b3:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:38:34:19:87:AA:7A:86:48:A3:B3:04:70:B8:B5:D0:73:23:50:01
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/415cee0c-4b69-4430-9961-4b7eb819f372/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/415cee0c-4b69-4430-9961-4b7eb819f372/4886a8268d8cb6de34247d7d4410bf4a238f672d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.32.0/22
                IPv6:
                  2806:3e1::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270151

    Signature Algorithm: sha256WithRSAEncryption
         21:56:99:f9:bd:c6:3d:25:e4:aa:ae:14:a7:2c:94:00:95:3d:
         e2:c7:11:cf:a8:c9:9e:85:2b:68:51:08:04:17:03:ba:d9:5f:
         ba:bd:2c:2e:7b:27:b8:da:91:37:f9:54:59:73:00:80:ce:38:
         2a:cf:aa:8d:7a:e0:93:6d:da:20:a7:51:4e:51:81:fc:15:52:
         1b:f3:a9:89:82:39:38:65:b6:13:df:bc:f9:31:5a:30:9a:ad:
         ca:f8:24:8f:ed:56:ae:00:da:52:7c:a0:f2:e5:37:05:d2:24:
         be:d1:34:28:e5:e7:3f:23:50:23:82:eb:e9:c4:e9:42:24:6f:
         07:b7:9b:df:41:b1:28:ca:4a:db:c7:ef:e3:21:f7:b7:b7:dd:
         d1:78:f8:84:ba:4f:e8:6b:80:38:a6:c1:cd:58:dd:63:15:ee:
         47:9b:2b:70:39:af:56:9e:25:2c:81:a4:6b:57:8b:26:02:3a:
         35:a8:6b:f9:28:a8:cd:3e:40:4e:31:55:2f:9d:50:56:9a:14:
         df:49:d9:e0:3e:86:cc:db:12:c8:89:8d:d1:db:22:bf:91:75:
         e1:a8:be:07:74:bf:fc:0a:97:63:da:44:38:64:73:24:59:95:
         15:92:47:9a:b5:46:a3:09:c3:86:1c:68:98:b4:a0:ec:cf:41:
         85:db:a4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----